Privacy Notice
Last Updated: July 2026
At Express Tunnels, privacy and security are fundamental principles. This Privacy Notice outlines what data we collect, how it is used, and how we safeguard your information when you use our website and port forwarding service.
1. Information We Collect
To provide our services and manage access control, we collect minimal necessary information:
- Account Credentials: Username, password hash, and email address for account management and recovery.
- Connection Metadata: Client IP address, ephemeral session secrets, and active forwarded port mappings to establish and maintain reverse SSH tunnels.
- Voucher & Subscription Data: Voucher codes and account expiration dates used to validate service access.
2. How Information is Used
We use collected data strictly to:
- Authenticate client connections and route remote port traffic.
- Prevent abuse, brute-force attacks, and unauthorized network usage.
- Communicate important service announcements or account status notifications.
3. Data Protection & Security
All sensitive authentication credentials, including passwords and login tokens, are stored using cryptographic hashes (SHA-256). Ephemeral keys used for client tunneling sessions are held in RAM memory sandboxes and deleted upon connection termination.
4. Third-Party Sharing
We do not sell, trade, or rent your personal information to third parties. We may disclose data only if strictly required by law or legal process.
5. Contact Us
If you have any questions regarding this Privacy Notice or your account data, please reach out via your account management dashboard or support channels.